Solved

Problem with Exchange Certificate

Posted on 2015-01-15
8
73 Views
Last Modified: 2015-01-21
It appeared that we were having a certificate issue on our exchange server. I purchased a new UCC from GoDaddy and installed it.  However, even after installing this and running enabling cmdlet, I continue to get this error. No one can connect via Outlook or OWA. Help.

"The name on the security certificate is invalid or does not match the name of the target site exchangeserver.

... (Error Code 10)
0
Comment
Question by:Philsh
  • 4
  • 3
8 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40551651
Did you put all of the correct SAN names on the new cert? When you try to go to mail.domain.com/owa what cert is it trying to use? You can reference the Thumbprint to ensure you are looking at the correct cert. You can find the Thumbprint under the details Tab.

Also re-run get-ExchangeCertificate and ensure that the new cert has all of the appropriate services applied.

Enable-Exchange Certificate -ThumbPrint xxxxxxxxxxxxxxxxxxxxxx -services "smtp,iis,pop,imap"
It should prompt to be the default: Y

Also checking IIS and seeing what cert it is using as well.

Will.
0
 

Author Comment

by:Philsh
ID: 40551657
Reran get-exchangecertificate and it shows all going to the right certificate.  How can I see what IIS is using? Thanks.
0
 

Author Comment

by:Philsh
ID: 40551691
Do I need Exchangeserver as a SAN by itself with no xxx.org at the end?
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40551736
You need to have your CN=mail.domain.com and you need to add all of the SAN names to it.
mail.domain.com
autodiscover.mail.com

You then need to make sure that your URL's correspond with the DNS names you have in your certificate SAN names.

Will.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:Philsh
ID: 40551910
Looks like a bigger issue. I noticed that my storage groups are disabled. I cannot mount the database files. They are there but I I think the group has been damages as it won't let me enable them.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 300 total points
ID: 40552018
A new certificate should not have this affect on the storage groups or databases. Looks like it might be a different problem or just a second problem.

Will.
0
 
LVL 25

Assisted Solution

by:-MAS
-MAS earned 200 total points
ID: 40553543
Please check this articles. It may help
EE
Technet

Use this for CSR generation
http://gallery.technet.microsoft.com/Exchange-20072010-and-2013-17a0b52f
0
 

Author Closing Comment

by:Philsh
ID: 40562210
Multiple issues: both certificate and disk drive.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
This video discusses moving either the default database or any database to a new volume.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now